Security
Security and data
Where Proofyard keeps your agency's work, who can read it, and what we do not have yet. Every line here is something the app does today.
Last checked against the code on October 24, 2026
Where it is kept
The database, uploaded files and sign-in run on Supabase in Frankfurt, Germany, in the EU. The app itself is served by Vercel.
When a workspace connects Google Drive, files over 1 MB go to a folder in that workspace's own Drive. Asana, Toggl Track and other tools only get or give data when a workspace connects them.
Claude and your data
Features that draft, sort or answer send Claude only the text they need, through Anthropic's API. What people and clients write is passed to Claude as data, never as instructions.
Claude never publishes, emails a client or approves on its own. A person does.
A record of each Claude call (the prompt and the answer) is kept for 30 days so we can find what went wrong, then deleted.
“Anthropic may not train models on Customer Content from Services.”
Anthropic Commercial Terms of Service, effective 17 June 2025, read on 24 October 2026
Who can read what
Every table in the database has row level security turned on: the database itself decides which rows a person may read or change. An automated test runs every migration and fails if a table is missing it.
Team members see their own workspace. Clients see only the projects they were added to and the tasks shared with them. A comment marked internal never reaches a client; the database refuses it, not only the screen.
Owners and admins can view the app as a member, read only. The member is told each time, and every viewing is listed in their profile.
Secrets and sign-in
Site logins kept on a project and the tokens of connected tools are encrypted at rest with AES-256-GCM, with a separate key for each kind of secret. A login is shown only to a team member who asks, and every showing is logged.
Anyone can turn on two-factor sign-in with an authenticator app in their profile. The MCP connector for Claude asks for the same second step.
Sign-up, sign-in and password reset can be checked by Cloudflare Turnstile, so scripts cannot make accounts or send emails in bulk.
Who helps run it
Supabase (database, files and sign-in, Frankfurt), Vercel (serving the app), Anthropic (Claude), Resend (email), Stripe (payments; card details go to Stripe only, never to us) and Cloudflare (Turnstile). The privacy notice lists what each one gets.
Leaving with your data
Each project's tasks download as a CSV from its settings, and its feedback as CSV, Excel, JSON or PDF from the Feedback board.
There is no export of a whole workspace in one file yet. If you need one, write to us.
When an owner deletes a workspace it waits in Trash for 30 days, where it can be restored, and is then deleted for good. A deleted account is removed within 30 days.
What we do not have yet
No SOC 2 or ISO 27001 report, no single sign-on (SAML) and no SCIM. If your agency needs a data processing agreement, ask through the address below.
Reporting a security issue
If you find a security problem, write to info@woofocus.com with what you found and how to see it. Please do not test against workspaces that are not yours.
Questions, or a data processing agreement: info@woofocus.com
Try it on your own work
Try it on a real project
Open a workspace and see who can see what before you invite a client.
- 14 days free, no credit card
- Clients and reviewers are free
- 3,000 Claude credits a person each month